Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216320.roa
File: AS216320.roa (raw, json)
Hash identifier: k2UahSvep2PqaXJ+CsX8zAUQbV+RHJE51ia8DOpPGyA=
Subject key identifier: C1:AF:9F:E6:8E:F1:0C:59:63:3D:51:0D:1A:CC:9C:03:4B:4D:EC:88
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4FF42D0AE31F5512448C8011165E7AA435A6DF70
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216320.roa
Signing time: Tue 26 Aug 2025 23:38:01 +0000
ROA not before: Tue 26 Aug 2025 23:33:01 +0000
ROA not after: Tue 25 Aug 2026 23:38:01 +0000
asID: 216320
IP address blocks: 82.21.7.0/24 maxlen: 24
2a13:9500:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f4:2d:0a:e3:1f:55:12:44:8c:80:11:16:5e:7a:a4:35:a6:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 26 23:33:01 2025 GMT
Not After : Aug 25 23:38:01 2026 GMT
Subject: CN=C1AF9FE68EF10C59633D510D1ACC9C034B4DEC88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:a0:81:86:dc:b3:c3:16:6f:98:dd:15:43:
c9:b6:0d:40:e4:6a:f1:b4:c7:ec:23:14:68:d7:04:
ec:30:69:5a:4a:08:29:21:49:99:fb:cb:cd:ac:e3:
89:21:ff:c5:32:6a:f7:e6:cd:51:10:af:f8:0d:d5:
4c:bc:b9:c2:32:87:ac:38:45:8b:16:22:4c:91:9b:
ca:c5:bc:b4:43:5c:df:d5:3f:a0:45:16:8b:43:11:
ab:7a:15:de:df:64:e8:aa:72:8d:3a:39:18:32:32:
fb:65:3a:29:01:57:d7:85:2d:bf:0c:ff:11:d2:4a:
85:ad:b2:42:32:7b:a3:04:2f:43:b8:91:20:e1:19:
98:47:45:09:e2:fb:c0:5d:63:4d:02:35:3d:0e:8c:
73:c9:a3:c2:c6:2a:ac:5a:8f:6f:97:93:7d:20:13:
5b:95:e0:91:14:29:28:c0:08:d0:8d:2a:d4:b0:fd:
96:70:7f:66:d2:9f:7d:84:57:7e:7a:ac:eb:ef:85:
8c:f5:af:ff:1d:e8:28:59:e1:98:2f:f4:d3:7f:65:
d6:cb:b0:9c:72:ea:98:07:d4:bd:d3:ff:0e:77:3a:
00:9d:50:c2:bf:6a:a9:97:de:c2:55:86:aa:25:2d:
30:e2:0d:04:8b:23:31:13:21:1d:0a:36:ad:dc:f4:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:9F:E6:8E:F1:0C:59:63:3D:51:0D:1A:CC:9C:03:4B:4D:EC:88
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.7.0/24
IPv6:
2a13:9500:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:1a:b5:a5:24:ce:13:2e:29:67:e3:2b:dc:87:1a:44:01:39:
1d:d1:cd:d8:04:cc:11:03:e5:f9:77:22:40:89:64:17:55:a8:
ab:f2:3c:bc:bc:50:37:c3:f6:34:ea:9d:68:e8:10:30:11:47:
c1:f2:51:aa:5d:89:56:0e:47:e4:50:d6:19:7f:cf:59:2b:c2:
a6:2d:6d:61:6d:df:81:ef:db:c6:7b:d4:df:b2:e1:27:04:32:
e6:c7:d9:13:3f:76:f2:f5:f9:0d:b9:65:bc:ba:0c:a3:d0:ff:
ed:0b:76:3b:47:21:83:8d:57:f6:2f:cf:4e:bf:0c:c5:cd:85:
6a:d6:49:25:fd:4f:e7:e1:20:02:ab:2e:cc:51:8b:ba:86:2a:
62:20:85:e4:96:b8:8e:da:0b:f2:a4:02:6b:e0:68:5c:be:f9:
cd:44:fe:4a:23:de:e6:73:79:c9:3a:95:57:e9:a8:76:c8:f1:
21:d9:46:dd:71:85:be:76:2a:7d:90:a9:be:0a:06:43:1e:93:
8c:fa:ed:bb:45:1f:cc:7a:30:8a:09:eb:17:d8:e9:e1:4b:b1:
34:24:79:bb:7a:29:e2:53:71:7c:2a:d5:79:3c:bb:c5:44:dc:
c8:3a:a3:4f:66:8a:93:5a:95:6b:ee:da:66:5a:8b:3d:5f:07:
8d:e4:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:45:31 2025 by rpki-client